Vendors / Open Dental Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 1
Exploited now Open Dental records in CISA KEV No Open Dental vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 54
Open Dental 16.1 and earlier has a hardcoded MySQL root password, which allows remote attackers to obtain administrative access by leveraging access to intranet TCP port 3306.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02489 · Published 2016-09-24 · No fix listed CWE-255
Priority MEDIUM 45
Open Dental before version 18.4 installs a mysql database and uses the default credentials of "root" with a blank password.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01246 · Published 2018-12-12 · No fix listed CWE-255
Priority LOW 36
Open Dental before version 18.4 transmits the entire user database over the network when a remote unauthenticated user accesses the command prompt.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01429 · Published 2018-12-12 · No fix listed CWE-200
Priority LOW 25
Open Dental before version 18.4 stores user passwords as base64 encoded MD5 hashes.
CVSS 3.0 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00525 · Published 2018-12-12 · No fix listed CWE-916
Open these records in search → All records by CVSS severity
2 1 1 0 0
